Skip to content

Commit

Permalink
Remove unnecessary allow-to-keycloak policy (#512)
Browse files Browse the repository at this point in the history
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

- **New Features**
- Enhanced Keycloak client configuration with new secrets for
`k8s-client`, `kubeapps-client`, and `kubeapps-auth-config`.
- Introduced new `ClusterKeycloak` and `ClusterKeycloakRealm` resources
for improved management.
- Updated Keycloak client scopes with additional attributes and protocol
mappers.
- Added multiple CiliumNetworkPolicy and CiliumClusterwideNetworkPolicy
configurations for better traffic control.

- **Improvements**
- Logic added to check for existing Kubernetes secrets and generate new
ones as needed, ensuring seamless configuration management.
- Enhanced network policies to provide comprehensive control over
ingress and egress traffic for various services within the tenant's
namespace.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
  • Loading branch information
klinch0 authored Dec 5, 2024
1 parent f97f673 commit b7a51ba
Show file tree
Hide file tree
Showing 2 changed files with 0 additions and 14 deletions.
12 changes: 0 additions & 12 deletions packages/apps/tenant/templates/networkpolicy.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -192,16 +192,4 @@ spec:
- toEndpoints:
- matchLabels:
cozystack.io/service: ingress
---
apiVersion: cilium.io/v2
kind: CiliumNetworkPolicy
metadata:
name: allow-to-keycloak
namespace: {{ include "tenant.name" . }}
spec:
endpointSelector: {}
egress:
- toEndpoints:
- matchLabels:
"k8s:io.kubernetes.pod.namespace": cozy-keycloak
{{- end }}
Original file line number Diff line number Diff line change
Expand Up @@ -112,8 +112,6 @@ spec:

---

---

apiVersion: v1.edp.epam.com/v1
kind: KeycloakClient
metadata:
Expand Down

0 comments on commit b7a51ba

Please sign in to comment.